Hi Greg, > Check out /var/log/sec ... this is the log file for dfix2. Look for the IP in that file > and send me details of what you find. That will help to understand why a > particular IP is getting blocked. Will do. Thanks for the help. Colin